Best Cisco 500-220 Exam Practice Material Updated on May 17, 2023 [Q28-Q51] : Actual Test Materials : http://blog.actualtests4sure.com

QUESTION 28
Company iPads are enrolled in Systems Manager without supervision, and profiles are pushed through Systems Manager.
Which outcome occurs when a user attempts to remove the “Meraki Management” profile on an iPad?

The “Meraki Management” profile cannot be removed.

The “Meraki Management” profile is removed and then pushed automatically by Systems Manager.

The “Meraki Management” profile is removed. All the profiles that Systems Manager pushed are also removed.

The “Meraki Management” profile is removed. All the profiles Systems Manager pushed remain.

QUESTION 29
Which VLAN is used to source pings across the site-to-site VPN when using the MX Live tools?

highest VLAN ID that is configured and set to NO to use VPN

lowest VLAN ID that is configured and set to YES to use VPN

highest VLAN ID that is configured and set to YES to use VPN

lowest VLAN ID configured and set to NO to use VPN

QUESTION 30
What are two organization permission types? (Choose two.)

Full

Read-only

Monitor-only

Write

Write-only

QUESTION 31
Which two features and functions are supported when using an MX appliance in Passthrough mode? (Choose two.)

intrusion prevention

site-to-site VPN

secondary uplinks

DHCP

high availability

QUESTION 32
Refer to the exhibit.

Assuming this MX has established a full tunnel with its VPN peer, how will the MX route the WebEx traffic?

WebEx traffic will prefer WAN 2 as long as it meets the thresholds in the “Conf” performance class.

WebEx traffic will prefer WAN 1 as it is the primary uplink.

WebEx traffic will prefer WAN 2 as long as it is up.

WebEx traffic will be load-balanced between both active WAN links.

QUESTION 33
Drag and drop the steps from the left into the sequence on the right to manage device control, according to Cisco Meraki best practice.

QUESTION 34
Which order is accurate for a firmware upgrade on MX appliances in a high-availability configuration?

starts on the secondary MX appliance and then occurs on the primary MX appliance

starts on both MX appliances at the same time and then reboots both appliances after traffic on the primary MX appliance ceases

starts on both MX appliances at the same time and then immediately reboots both appliances

starts on the primary MX appliance and then occurs on the secondary MX appliance

QUESTION 35
When an SSID is configured with Sign-On Splash page enabled, which two settings must be configured for unauthenticated clients to have full network access and not be allow listed? (Choose two.)

Controller disconnection behavior

Captive Portal strength

Simultaneous logins

Firewall & traffic shaping

RADIUS for splash page settings

QUESTION 36
For which two reasons can an organization become “Out of License”? (Choose two.)

licenses that are in the wrong network

more hardware devices than device licenses

expired device license

licenses that do not match the serial numbers in the organization

MR licenses that do not match the MR models in the organization

QUESTION 37
A new application needs to be pushed to all iOS devices. Some devices report “NotNow” in the event log and do not install the application.
What does the “NotNow” event indicate?

The application requires the most recent iOS version.

The device is locked with a passcode.

The device cannot connect to Apple servers.

The device cannot connect to Cisco Meraki servers.

QUESTION 38
Refer to the exhibit.

A packet arrives on the VPN concentrator with source IP 10.168.70.3 and destined for IP 10.116.32.4.
What is the next hop for the packet, based on this concentrator routing table?

The concentrator gateway (10.128.124.62) is the next hop.

Not enough detail is available to determine the next hop.

The packet is stopped.

The Auto VPN peer “Store 1532 – appliance” is the next hop.

QUESTION 39
Which two Systems Manager Live tools are available only for Apple Macs and Windows PCs and cannot be used on iOS or Android mobile devices? (Choose two.)

OS updates

Send notification

Selective wipe

Screenshot

Remote Desktop

QUESTION 40
Which type of authentication protocol is used when using OSPF on an MX appliance?

MD5

certificate

plaintext

SHA-1

QUESTION 41
Which two primary metrics does Meraki Insight use to calculate the Application Performance Score? (Choose two.)

Maximum Jitter

Total Bandwidth Usage

Maximum Latency

Per-flow Goodput

Application Response Time

QUESTION 42
Which Cisco Meraki product must be deployed in addition to Systems Manager so that Systems Manager Sentry enrollment can be used?

MS Switch

Meraki Insight

MR Access Point

MV Smart Camera

QUESTION 43
Which configuration step is necessary when automatic updating is required of iOS apps provisioned through Systems Manager that are found in the App Store?

No configuration step is necessary; automatic updating is the default behavior.

Configure automatic updating of iOS devices in the Meraki installed profile.

Create a security policy that enables automatic updates.

Create a profile with automatic update enabled and apply it to iOS devices.

QUESTION 44
Refer to the exhibit.

Which outcome occurs when logging is set to Enabled?

Outbound flows are sent to a configured syslog server if a syslog sender is configured for flows.

The hits counter within this section is now enabled.

This firewall rule is now enabled.

Inbound flows are sent to a configured syslog server if a syslog server configured for flows.

QUESTION 45
Which API endpoint clones a new Organization?

POST /organizations/clone/{organizationId}

PUT /organizations/{organizationId}/clone

POST /organizations/{organizationId}/new

POST /organizations/{organizationId}/clone

QUESTION 46
A customer requires a hub-and-spoke Auto VPN deployment with two NAT-mode hubs with dual uplink connections and 50 remote sites with a single uplink connection.
How many tunnels does each hub need to support?

100

104

QUESTION 47
Refer to the exhibit.

Which IDS/IPS mode is the MX Security Appliance configured for?

quarantine

prevention

detection

blocking

QUESTION 48
What are two ways peers interact with ports that Auto VPN uses? (Choose two.)

For IPsec tunneling, peers use high UDP ports within the 32768 to 61000 range.

Peers contact the VPN registry at UDP port 9350.

For IPsec tunneling, peers use high TCP ports within the 32768 to 61000 range.

Peers contact the VPN registry at TCP port 9350.

For IPsec tunneling, peers use UDP ports 500 and 4500.

QUESTION 49
How does a Meraki device behave if cloud connectivity is temporarily lost?

The offline device continues to run with its last known configuration until cloud connectivity is restored.

The offline device reboots every 5 minutes until connection is restored.

The offline device stops passing traffic.

The offline device tries to form a connection with a local backup sever.

QUESTION 50
Refer to the exhibit.

Which design recommendation should be considered?

A 25-percent throughput loss occurs for every hop. Cisco Meraki best practice recommends a 1-hop maximum.

A 25-percent throughput loss occurs for every hop. Cisco Meraki best practice recommends a 2-hop maximum.

A 50-percent throughput loss occurs for every hop. Cisco Meraki best practice recommends a 1-hop maximum.

A 50-percent throughput loss occurs for every hop. Cisco Meraki best practice recommends a 2-hop maximum.